Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/lOdaAdmALL6aTli_fpNufgQnHgk.roa
File: lOdaAdmALL6aTli_fpNufgQnHgk.roa (raw, json)
Hash identifier: CciZXByW90dELFf4UGOPrno7gWnlPdYPYFizSxpv+8o=
Subject key identifier: 94:E7:5A:01:D9:80:2C:BE:9A:4E:58:BF:7E:93:6E:7E:04:27:1E:09
Certificate issuer: /CN=f541d46893aaa164fe2673990d07aa6c071003c0
Certificate serial: 040B0F18
Authority key identifier: F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/lOdaAdmALL6aTli_fpNufgQnHgk.roa
Signing time: Sat 01 Jan 2022 00:55:05 +0000
ROA not before: Sat 01 Jan 2022 00:55:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202709
IP address blocks: 45.67.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67833624 (0x40b0f18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f541d46893aaa164fe2673990d07aa6c071003c0
Validity
Not Before: Jan 1 00:55:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=94e75a01d9802cbe9a4e58bf7e936e7e04271e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:37:20:29:2a:bd:79:bd:90:d0:a7:e5:d6:19:
b1:6c:4f:13:0b:e4:5a:54:d4:62:03:e9:95:f5:d8:
c8:78:46:da:5d:52:ac:bf:80:af:5b:6e:60:6f:29:
4e:de:52:0e:30:85:2e:89:c2:5d:63:4b:e0:7c:b4:
1c:00:8f:75:d0:eb:3d:a7:f8:4d:5b:4f:d0:98:bb:
68:a6:ee:db:91:60:97:78:bd:60:64:8a:d0:96:0a:
73:ce:09:32:88:b1:d0:ca:f0:43:82:d3:ec:60:57:
6f:58:c2:6e:b7:ae:8a:93:68:27:2c:b5:a2:3b:d6:
07:40:6e:9d:b1:e1:93:f4:45:eb:69:d0:d5:5b:21:
62:15:0e:7b:a3:3b:04:85:48:28:4d:55:1c:f2:3c:
5d:37:fc:36:ff:33:0b:ef:6e:4e:d0:cd:d3:70:5c:
d7:f5:cd:e3:25:a1:77:cb:67:1e:42:ee:7c:13:07:
bc:6c:8e:3f:7f:af:85:3d:85:2e:34:9d:87:6f:dc:
c1:2e:a3:ba:91:8f:c5:1b:5b:d0:16:f5:b3:ee:4e:
a9:5f:c7:f6:25:71:78:38:fa:f7:07:d5:41:de:93:
7f:15:d6:16:01:aa:4d:9a:d2:69:f3:87:1a:f2:44:
df:3e:53:0a:9c:43:ef:d5:42:a0:aa:7d:b9:1e:5b:
51:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E7:5A:01:D9:80:2C:BE:9A:4E:58:BF:7E:93:6E:7E:04:27:1E:09
X509v3 Authority Key Identifier:
keyid:F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/lOdaAdmALL6aTli_fpNufgQnHgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.127.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:c8:d2:46:f0:8d:02:06:40:a3:10:a6:a9:44:c0:70:e9:b5:
5b:c9:9d:a3:bb:e8:80:2c:92:10:55:06:e5:8d:bb:df:eb:b3:
10:9d:ce:3a:db:c1:f3:5a:ad:40:4a:c5:d1:8d:57:26:c6:7e:
68:f7:51:93:7f:ee:ca:5c:9b:3e:eb:ef:9c:24:7c:d1:ee:f8:
36:ec:d8:e7:e5:0d:ea:f5:61:6c:e8:a1:36:26:08:4c:11:eb:
ef:69:3c:4d:fb:61:e5:8e:d7:91:6a:3d:0e:30:3e:8a:59:e4:
e1:e4:65:83:e4:9d:51:e4:52:b8:48:26:0d:91:6c:10:d9:34:
f0:73:55:2e:9a:4b:38:06:c6:24:09:88:c4:b8:9c:00:72:85:
64:0e:c1:42:62:14:e2:de:14:ed:48:ad:16:e9:bc:bf:cb:58:
b1:15:ea:be:04:28:b1:4c:af:59:42:35:9d:f4:45:4e:41:c1:
7f:2d:ea:67:a4:15:36:2a:82:af:87:16:ee:a2:8b:c4:7d:57:
3e:b2:bc:c6:6c:10:b7:0c:f5:19:bd:1e:f0:59:94:6f:f2:17:
54:5d:bb:03:4c:1a:33:e1:4f:e9:47:9c:05:d6:51:fd:63:83:
6b:51:09:01:37:11:b6:9f:22:2a:9f:66:c0:f2:e9:10:7c:b8:
8b:f0:6b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:19 2023 by rpki-client on console-ams.rpki-client.org